K00721320 : BIG-IP AFM NAT64 policy vulnerability CVE-2022-41806

Security Advisory Description

When a BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. (CVE-2022-41806)

Impact

System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.